<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: cesarb</title><link>https://news.ycombinator.com/user?id=cesarb</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 18 Aug 2026 10:14:01 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=cesarb" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by cesarb in "Incident with Github.com"]]></title><description><![CDATA[
<p>> If your app is not too large you can do CI/CD perfectly fine from your laptop.<p>Not if you want to make sure it compiles and works on Windows (which you don't have) or macOS (which you don't have and can't emulate). That's something github gives for free, and for me, it's the only reason to stay on github for small/tiny free software projects (at least as a secondary host).</p>
]]></description><pubDate>Mon, 17 Aug 2026 14:20:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=49331460</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49331460</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49331460</guid></item><item><title><![CDATA[New comment by cesarb in "Incident with Github.com"]]></title><description><![CDATA[
<p>> go hit the gym or walk outside.<p>My mind immediately went to this classic xkcd: <a href="https://xkcd.com/303/" rel="nofollow">https://xkcd.com/303/</a></p>
]]></description><pubDate>Mon, 17 Aug 2026 14:04:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=49331158</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49331158</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49331158</guid></item><item><title><![CDATA[New comment by cesarb in "Oracle bans AI-generated code from OpenJDK"]]></title><description><![CDATA[
<p>The same that happened when Sun died: it gets bought by someone else.</p>
]]></description><pubDate>Fri, 07 Aug 2026 19:20:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=49215100</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49215100</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49215100</guid></item><item><title><![CDATA[New comment by cesarb in "Oracle bans AI-generated code from OpenJDK"]]></title><description><![CDATA[
<p>> Software as a list of requirements and that's it. [...] a document specifying hardware, interfaces, and requirements [...]<p>For that, you'd want the list of requirements and hardware documentation to be written in a precise, formal language. That's no different than writing them in a programming language (though a declarative one, instead of the more common imperative ones).<p>I've in the past (way before LLMs existed) thought about automatically generating device drivers from hardware documentation. But besides the need for very precise documentation, hardware never works exactly as documented; a human-written device driver can avoid problematic areas (perhaps even by accident), while a computer-written device driver would end up exploiting every corner case of the documentation.</p>
]]></description><pubDate>Fri, 07 Aug 2026 19:18:09 +0000</pubDate><link>https://news.ycombinator.com/item?id=49215069</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49215069</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49215069</guid></item><item><title><![CDATA[New comment by cesarb in "Oracle bans AI-generated code from OpenJDK"]]></title><description><![CDATA[
<p>> maintain and keep your fork of software with the changes you want or need<p>Then you'll have the same problem everyone who forks a piece of software ends up having, sooner or later: as the original evolves, keeping your fork up to date with the upstream changes becomes harder and harder. The bigger and more invasive the changes are, the harder synchronizing with newer releases become.</p>
]]></description><pubDate>Fri, 07 Aug 2026 19:11:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=49214996</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49214996</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49214996</guid></item><item><title><![CDATA[New comment by cesarb in "JEP 401: Value Objects (Preview) merged to OpenJDK master"]]></title><description><![CDATA[
<p>> It's absolutely irrelevant to compare these two languages. Calling the former "Javascript" was just a marketing trick.<p>Playing devil's advocate: back when you still could use Java in the browser, you could use Javascript to script your Java applets.</p>
]]></description><pubDate>Fri, 31 Jul 2026 14:40:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=49123776</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49123776</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49123776</guid></item><item><title><![CDATA[New comment by cesarb in "Codeberg Divides"]]></title><description><![CDATA[
<p>> I wish Codeberg were more forward-looking here: willing to host the Open Source software of tomorrow, not only software made in the ways its community approves of today.<p>Is "vibe-coded software" <i>really</i> going to be the "Open Source software of tomorrow"? The opinion stated in the blog post announcing this change is the opposite:<p>"We believe that LLMs endanger the free/libre software ecosystem as a whole." and this is expanded in more detail later in that blog post (starting at the "Collaboration at danger" section).<p>This reeks of the same FOMO strategy seen often in cryptocurrency projects (which, unsurprisingly, have also been banned from Codeberg at the same time): stating that their way is going to be the future, and that those who don't follow it will be left behind ("have fun staying poor").</p>
]]></description><pubDate>Fri, 24 Jul 2026 19:46:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=49040753</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=49040753</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49040753</guid></item><item><title><![CDATA[New comment by cesarb in "OpenAI and Hugging Face address security incident during model evaluation"]]></title><description><![CDATA[
<p>Since nobody seems to have posted it yet, relevant xkcd: <a href="https://xkcd.com/416/" rel="nofollow">https://xkcd.com/416/</a></p>
]]></description><pubDate>Tue, 21 Jul 2026 23:20:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48999706</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48999706</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48999706</guid></item><item><title><![CDATA[New comment by cesarb in "OpenAI and Hugging Face address security incident during model evaluation"]]></title><description><![CDATA[
<p>> The real nightmare scenario is the AI using its abilities to copy itself to new locations. [...] it could effectively self sustain itself as long as it is able to find work. [...]<p>Isn't this the plot of Endgame: Singularity? (<a href="https://packages.debian.org/bookworm/singularity" rel="nofollow">https://packages.debian.org/bookworm/singularity</a>)</p>
]]></description><pubDate>Tue, 21 Jul 2026 23:02:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=48999526</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48999526</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48999526</guid></item><item><title><![CDATA[New comment by cesarb in "Who's afraid of Chinese models?"]]></title><description><![CDATA[
<p>As a less extreme example: consider how many non-USA hosts say they follow the DMCA.</p>
]]></description><pubDate>Tue, 21 Jul 2026 15:41:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=48993802</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48993802</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48993802</guid></item><item><title><![CDATA[New comment by cesarb in "Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled"]]></title><description><![CDATA[
<p>Didn't Chrome also come bundled with other software like torrent clients? That is, unless you unchecked a checkbox in the installer for these software, you ended up with Chrome installed? Unless people were careful to pay attention to every checkbox on every installer, Chrome could end up installed without their knowledge.</p>
]]></description><pubDate>Wed, 15 Jul 2026 19:24:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48925859</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48925859</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48925859</guid></item><item><title><![CDATA[New comment by cesarb in "Dependabot version updates introduce default package cooldown"]]></title><description><![CDATA[
<p>> The reality is that each update is its own potential security issue<p>Even beyond security issues: each update is a new opportunity for breakage, not only from bugs in the third-party package, but also from unexpected dependencies on the third-party package's behavior.</p>
]]></description><pubDate>Tue, 14 Jul 2026 22:59:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=48914013</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48914013</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48914013</guid></item><item><title><![CDATA[New comment by cesarb in "Professor denounces mass AI fraud on an exam at Brown"]]></title><description><![CDATA[
<p>I saw plenty of mechanical typewriters by the 80s/90s, when I learned typing at school. A relative of mine also taught a typewriter course, with several different mechanical typewriter models. Everyone I know who had a typewriter had a mechanical one. I don't think I've ever seen an electric typewriter in person; I've only read about them in the Internet. They don't seem to have been that widespread to me.</p>
]]></description><pubDate>Tue, 30 Jun 2026 04:17:38 +0000</pubDate><link>https://news.ycombinator.com/item?id=48728437</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48728437</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48728437</guid></item><item><title><![CDATA[New comment by cesarb in "Professor denounces mass AI fraud on an exam at Brown"]]></title><description><![CDATA[
<p>> Fill the room with typewriters.<p>Playing devil's advocate: one reason I'm good at typing on computers is that I learned on typewriters, which need much more force for each key press, especially the little fingers. Someone who learned on computer keyboards won't have trained the muscles on their fingers as much, and will have a hard time pressing the outer keys strongly enough (and if you press the keys too lightly, the mechanism won't hit the ink ribbon with enough force to transfer the ink to the paper).</p>
]]></description><pubDate>Mon, 29 Jun 2026 12:24:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48718346</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48718346</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48718346</guid></item><item><title><![CDATA[New comment by cesarb in "Framework's 10G Ethernet module exposes USB-C's complexity"]]></title><description><![CDATA[
<p>> Realtek makes some pretty affordable networking chips but their Linux drivers can be a real gamble. Either it works out of the box or you're in for years of messing around.<p>And that's when it's a legitimate Realtek chip. Many years ago, I bought a 100M Realtek Ethernet card, expecting it to work out of the box on Linux; but it was actually a counterfeit, using a Silan chip instead of a Realtek chip, and the out-of-tree Linux driver (for Linux 2.4) that came with it on the CD was actually a driver for the Silan chip with the numbers filed off. I ended up writing and submitting a Linux 2.6 driver for it, just to make people stop blaming the Realtek driver for not working with the unrelated Silan chip.</p>
]]></description><pubDate>Fri, 26 Jun 2026 17:39:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=48689499</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48689499</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48689499</guid></item><item><title><![CDATA[New comment by cesarb in "Linux and Secure Boot certificate expiration (2025)"]]></title><description><![CDATA[
<p>> nobody else should ever be using my machines in the first place, and if they are, I'm going to have larger issues than what OS they decide to try to boot.<p>The threat model secure boot was actually designed to protect against is not someone else booting a different OS in your hardware; the real threat model it protects against is malware loading before the OS can start the antivirus. With UEFI, malware could in theory run even when you boot from your OS install media, making it much harder to detect and remove. That's the reason installing your own secure boot key requires a one-time confirmation through a physical input device (which malware can't fake).<p>Unfortunately, protecting against that threat model (persistent malware loading before the OS) created another threat model, which IMO is a bigger worry: that you could one day be forbidden from running your own OS in your own devices. AFAIK, there have already been a few devices where secure boot cannot be disabled, your own secure boot keys cannot be enrolled, and the "third party" (aka "non-Microsoft") key is not available.</p>
]]></description><pubDate>Tue, 23 Jun 2026 02:06:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=48639280</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48639280</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48639280</guid></item><item><title><![CDATA[New comment by cesarb in "What was nice about the UI of Windows 2000"]]></title><description><![CDATA[
<p>> You could've changed the setting that puts the button back on the lower left corner and saved your relative the trouble.<p>Nice, I didn't know that was possible; I expected it to be unchangeable, since I heard that the whole taskbar is no longer customizable in newer Windows releases.</p>
]]></description><pubDate>Thu, 18 Jun 2026 22:54:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=48592734</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48592734</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48592734</guid></item><item><title><![CDATA[New comment by cesarb in "What was nice about the UI of Windows 2000"]]></title><description><![CDATA[
<p>> There is an assumption that by now everyone knows what the menu in the bottom left corner does<p>Except that... it's no longer in the bottom left corner! Recently, I had to help a relative with a Windows system, and what passes for the "Start" button has now moved to somewhere more in the center (and, of course, this completely confused my relative, who was used to the old place). I also had to rant about Fitt's law (without mentioning its name) and how things were better the way they were before. And I also had to find out and show them where the shutdown button ended up this time, so they could power off the computer normally (as they were used to) instead of having to use the power strip switch.<p>And the issue I had to help with? Windows was too slow (to the point of nearly unusable). They don't use the computer often (and obviously always power it down after each use), so it's always running some heavy background update (on a mechanical hard drive) whenever it boots up. My advice was to power it up and let it sit for about an hour before using, then it would be back to normal speed.</p>
]]></description><pubDate>Thu, 18 Jun 2026 17:01:46 +0000</pubDate><link>https://news.ycombinator.com/item?id=48588322</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48588322</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48588322</guid></item><item><title><![CDATA[New comment by cesarb in "How memory safety CVEs differ between Rust and C/C++"]]></title><description><![CDATA[
<p>> their proposal usually begins by proposing that it "should" be possible to just compile Linux as C++ software<p>That has already been done in the past. Quoting the FAQ:<p>"[...] the kernel was once modified to be compiled under g++. That lasted for a few revisions. People complained about the performance drop. It turned out that compiling a piece of C code with g++ would give you worse code. It shouldn't have made a difference, but it did. Been there, done that."</p>
]]></description><pubDate>Tue, 16 Jun 2026 01:19:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=48549334</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48549334</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48549334</guid></item><item><title><![CDATA[New comment by cesarb in "Linux 7.1"]]></title><description><![CDATA[
<p>> It’s fairly easy to build your own kernel packages from vanilla sources in Debian.<p>IIRC, Debian has a command called "make-kpkg" which does nearly all the work for you, ending up with a installable package which works identically to the standard Debian kernel packages.</p>
]]></description><pubDate>Sun, 14 Jun 2026 20:58:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=48532628</link><dc:creator>cesarb</dc:creator><comments>https://news.ycombinator.com/item?id=48532628</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48532628</guid></item></channel></rss>